npmpackage.info

Gathering detailed insights and metrics for @janiscommerce/superstruct

@janiscommerce/superstruct

1.2.1

JavaScript

Installations

npm install @janiscommerce/superstruct

Pull Requests

Open

10

Total

18

Closed

5

Merged

3

Issues

Open

0

Total

1

Closed

1

Releases

v1.2.0

1.2.0

Published on 05 Mar 2021

View all 1 releases

Developer

janis-commerce

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

12.22.12

NPM Version

6.14.16 Statistics

1 Stars

30 Commits

2 Watching

12 Branches

4 Contributors

Updated on 20 Sept 2022

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

74,200

Last day

1.6%

Compared to previous day

Last week

1.1%

356

Compared to previous week

Last month

-1.5%

1,658

Compared to previous month

Last year

5.9%

22,436

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

superstruct

Dev Dependencies

husky eslint eslint-config-airbnb-base eslint-plugin-import mocha nyc sinon

Versions

superstruct

The following package complements the superstruct package, the same adds some methods to easily validate different types of data

Installation

1npm install @janiscommerce/superstruct

Available custom structs types

The custom types that you can use in addition to the superstruct are:

email This type checks if is a valid email
URL This type checks if is a valid URL
empty This type checks if it's an empty string, array or a falsy value
!empty This type checks if it's not an empty string, array or a falsy value
lowercase This type checks if is a valid lowercase string
uppercase This type checks if is a valid uppercase string
camelcase This type checks if is a valid camelcase string
numeric This type checks if is a valid numeric value
md5 This type checks if is a valid md5 hash
JSON This type checks if is a valid JSON
ISODate This type checks if is a valid ISO Date
integer This type checks if is a integer number
positive This type checks if is a positive number
positiveOrZero This type checks if is a positive number or zero
objectId This type checks if is a ObjectId with 24 characters
UUID This type checks if is a V4 UUID
hexColor This type checks if is a Hexadecimal Color

Usage

1const { struct } = require('@janiscommerce/superstruct');
2
3const userStruct = struct({
4	name: 'string',
5	email: 'email',
6	age: 'number',
7	password: 'md5',
8	image: 'URL',
9	mainColor: 'hexColor
10});
11
12const userData = {
13	name: 'John Doe',
14	email: 'emai@asd.com',
15	age: 28,
16	password: 'be5b0158b79c90c8358990f34ec18d43',
17	image: 'https://gravatar.com/avatar/23463b99b62a72f26ed677cc556c44e8?s=200',
18	hexColor: '#123456'
19};
20
21userStruct(userData);

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-status.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/build-status.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-status.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/build-status.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage-status.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/coverage-status.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage-status.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/coverage-status.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage-status.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/coverage-status.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/npm-publish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/janis-commerce/superstruct/npm-publish.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/build-status.yml:23
Warn: npmCommand not pinned by hash: .github/workflows/coverage-status.yml:21
Warn: npmCommand not pinned by hash: .github/workflows/npm-publish.yml:16
Warn: npmCommand not pinned by hash: .github/workflows/npm-publish.yml:28
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 4 npmCommand dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

License

Determines if the project has defined a license.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

2.3

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More